CVE-2022-23922

Опубликовано: 24 фев. 2022

Источник: nvd

CVSS3: 5.6

CVSS3: 7.8

CVSS2: 4.4

EPSS Низкий

Описание

WIN-911 2021 R1 and R2 are vulnerable to a permissions misconfiguration that may allow an attacker to locally write files to the Program Announcer directory and elevate permissions whenever the program is executed.

Ссылки

https://supportdesk.win911.com/support/solutions/articles/24000074683-win-911-2021-r1-r2-file-permission-vulnerability
Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-03
Mitigation
Third Party Advisory
US Government Resource
https://supportdesk.win911.com/support/solutions/articles/24000074683-win-911-2021-r1-r2-file-permission-vulnerability
Vendor Advisory
https://www.cisa.gov/uscert/ics/advisories/icsa-22-053-03
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:win-911:win-911_2021_r1:5.21.10:*:*:*:*:*:*:*

cpe:2.3:a:win-911:win-911_2021_r2:5.21.17:*:*:*:*:*:*:*

EPSS

Процентиль: 9%

0.00032

Низкий

5.6 Medium

CVSS3

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-276

Связанные уязвимости

GHSA-gw8p-8q4c-pv8m

github

почти 4 года назад

EPSS

Процентиль: 9%

0.00032

Низкий

5.6 Medium

CVSS3

7.8 High

CVSS3

4.4 Medium

CVSS2

Дефекты

CWE-276